[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: INITIAL-CONTACT issues
Sankar,
The TCP spec does not contain a "keepalive" mechanism (at least the one I
remember did not); keepalive is a feature added by some implementations.
TCP specifies timers for killing off connections, e.g., in terms of no ack
for transmitted data, which is one way to deal with the situation where one
end of the connection has crashed. Also, since TCP is implemented in end
systems, an application may intervene to terminate a connection, e.g.,
because a user decides to give up. IPsec, when implemented in a host, and
integrated with a socket interface, can use the same set of inputs for
terminating an SA if the SA is dedicated to a TCP connection.
IPsec has a harder job, in the case of an SG, because there is no direct
tie to a socket interface. That's where SA management, in terms of
cleanup, becomes hard.
Steve